I have images uploaded to S3 and CloudFlare enabled on my site. To my knowledge however, and correct me if I am wrong, the CloudFlare’s hotlink protection does not work due to the images being hosted on a different domain. Any suggestions or example implementations? If the S3 bucket policy is the w…

You’d want to talk to CloudFlare about that, presumably. There’s nothing Discourse-specific about hotlinking protection on S3.

No, nothing Discourse specific. But many of us rely on S3, so I am interested in how people treat hotlinking — new stuff for me personally, so gotta learn. Useful for anyone using S3, as hotlinking will become an issue. It just a matter of time.

no idea how this works with CloudFlare, but an S3 bucket policy to do this checks the referer. The code below has nothing to do with discourse, it is protecting some files in a special paid section of an old website I have. {"Version":"2008-10-17", "Id":"preventHotLinking", "Statement":[ {"Sid":"1…

[image] rdyar: Interesting that it looks like Referer is mis-spelled but that is working code. HTTP referer | Etymology The misspelling of referrer was introduced in the original proposal by computer scientist Phillip Hallam-Baker to incorporate the "Referer" header field into the …

Best practice to prevent image hotlinking?

Product Support

notriddle (Michael Howell) February 19, 2018, 1:43am 5

Topic		Replies	Views
Download Remote Images with Referer (plugin possible?) Development	13	860	April 1, 2023
S3 links with .gif extension do not display Bug	2	2034	October 18, 2019
Image upload error: The bucket does not allow ACL's Product Support s3	5	1901	June 10, 2022
What are the right settings to use S3 bucket (with non-Amazon URL)? Self-hosting	19	5452	August 25, 2020
Custom avatar cannot be displayed Product Support	0	359	May 14, 2022

Best practice to prevent image hotlinking?

Related topics